ASP Dynamika version 2.5 suffers from arbitrary file upload and remote SQL injection vulnerabilities.